Solution:
Computer Associates claims this vulnerability required administrative access to a machine to exploit. This issue has been addressed in the latest release of the product which is now at CA (Release 4, build 1.4.5).